§ 1. Personal data administrator
The administrator of your personal data isBloomed Limited Liability Company, 74 Katowicka Street, 41-500 Chorzów, Tax ID: 6272767687, KRS: 0000846869, REGON: 386369097.
Contact:kontakt@ortosmilesilesia.pl. The controller has not appointed a Data Protection Officer.
§ 2. Scope of application
The policy applies to users of the ortosmilesilesia.pl website, including people browsing the website, contacting the office, making appointments, subscribing to the newsletter and using related social media profiles.
Medical documentation is subject to separate rules made available to patients in the office.
§ 3. Purposes and legal basis
Handling inquiries and arranging visits
Contact details are processed for the purpose of responding, arranging or confirming an appointment pursuant to Art. 6 section 1 letter b or f GDPR, generally no longer than 12 months from the last contact.
Provision of health services
Identification, contact and health data are processed under Article 6(1)(c), read in conjunction with Article 9(2)(h), of the GDPR. Medical records are generally retained for 20 years from the date of the last entry; records concerning children are retained until they reach the age of 22.
Marketing, analytics and statistics
Newsletter, remarketing and analytics work on the basis of consent. Consent may be withdrawn at any time. Details of tracking technologies are describedCookie policy.
Claims, taxes and accounting
The data may be stored until the expiry of the limitation periods for claims and for the period required by tax and accounting regulations.
§ 4–5. Recipients and data transfer
The data may be received by IT, hosting, medical software providers, payment operators, accounting offices, law firms and relevant public authorities. The administrator does not sell data.
Google, Meta, TikTok, LinkedIn and Microsoft services may involve the transfer of data outside the EEA based on standard contractual clauses or the Data Privacy Framework.
§ 6. Rights of the data subject
- access to data and receiving a copy,
- rectification of data,
- deletion or limitation of processing - in cases provided for by law,
- data transfer,
- objection to processing,
- withdrawal of consent,
- complaint to the President of the Personal Data Protection Office.
Requests can be sent to kontakt@ortosmilesilesia.pl or in writing to the Administrator. The response is generally given within one month.
§ 7–9. Health data, voluntariness and profiling
Health data are subject to enhanced protection and are processed for prevention, diagnosis and treatment, on the basis of explicit consent, where required, or to protect the patient's vital interests. Only persons bound by professional secrecy have access.
Providing marketing data is voluntary. Data required for medical documentation and billing are necessary to provide services. The Administrator does not apply automatic decisions that produce legal effects.
§ 10–13. Document security and changes
The administrator uses HTTPS encryption, access control, backups, staff training and security updates. The website may contain external links for which the Administrator is not responsible for their privacy policies.
The document may be updated due to changes in law, organization or technology. The current version is published on the website.